This Regional Privacy Notice (“Regional Notice”) is provided as a supplement to the Privacy Notice to provide additional information to individuals in the European Economic Area, Switzerland, United Kingdom, and other regions which may have similar laws with similar requirements, such as Brazil (“Relevant Regions”) as required under the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679 of the European Parliament), the United Kingdom General Data Protection Regulation (UK GDPR), and the Swiss Federal Act on Data Protection (FADP), as applicable (the “Relevant Laws”). This Regional Notice states our purposes for personal information processing, the rights you have regarding our processing of your personal information, and our contact information if you have any questions regarding our processing of your personal information. This Regional Notice is incorporated into and forms part of our Privacy Notice. Capitalized terms used but not defined in this Regional Notice will have their meanings assigned to them in the Privacy Notice.
Personal information collected on or about individuals located in Relevant Regions is collected on the following legal bases for processing:
- Necessary for Performance of a Contract: If we entered into a contract with customers, partners, suppliers or other third parties, we may need to process your personal information to perform our obligations under such contract or we may need to process your personal information to enter into an employment contract with you if you applied for a job with Covalent.
- Consent: If you provided your consent for us to engage in marketing activities with you, we may need to process your personal information to conduct those marketing activities. If you provided us with explicit consent to process your sensitive or special categories of information in connection with our recruiting activities, we may process such information pursuant to your explicit consent.
- Legitimate Interest: We may need to process your personal information where we have a legitimate interest in doing so, such as (1) to communicate with you in response to your requests, questions, inquiries, and submissions; (2) to conduct advertising, marketing and promotional activities in connection with operating our business; (3) for research and development, operation, security and optimization of our business and the Services; (4) to process a job application, conduct recruiting activities, develop and improve our recruiting process, and communicate with you regarding your interest in current or future employment opportunities with us; and (5) for fraud prevention and know-your-customer obligations.
- Comply with Legal Obligations: We may process your personal information if we are required to comply with laws or legal obligations.
Individuals located in Relevant Regions have certain rights related to the processing of their personal information we process, as set forth below:
- Access: You may request to receive a copy of your personal information in machine-readable form.
- Delete: You may request we delete some personal information, subject to certain exceptions.
- Correct or Rectify: You may correct or change some personal information that we store about you, including any inaccurate information.
- Object to or Restrict Processing: You may object to our processing of some personal information about you or restrict or limit our use of some personal information about you.
- Transfer: You may request, to the extent feasible, the transfer of your personal information to another data controller.
- Consent Withdrawal: You may withdraw consents you previously granted to us.
- Automated Decision-Making: You have the right not to be subject to automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you, with certain exceptions. We do not generally engage in such automated decision-making in our Services, and if we do, we comply with applicable legal requirements in connection with such data processing.
Please note that we may not be able to fulfill your request, depending on our legal obligations. For example, we may not be able to delete or anonymize all data as we may be legally required to retain certain data or retain certain data in identifiable form.
Relevant Laws may require us to verify your identity and we may not be able to respond to your request if we cannot verify your identity. If an authorized agent submits a request on your behalf, we may need to contact you to verify your identity and protect the security of your personal information. If you wish to file a complaint about our use of your personal information or our response to your requests regarding your personal information, you may contact the data protection or other Supervisory Authority in your region.
Subprocessors
We may engage the below third-party processors who may process your personal information (“Subprocessors”) in the performance of our Services. Click here for list of our current subprocessors.
Contact
If you would like to exercise your rights, or you have any concerns about how we process your data under the Relevant Laws, you may contact us as set forth in our Privacy Notice.
